Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/7F0F0E7AC92311EBB709B444C4F9AE02.roa
File:                     7F0F0E7AC92311EBB709B444C4F9AE02.roa (raw, json)
Hash identifier:          JBC6Nw6olyRKC+trE5CNUXl8ZwEiFDPvV28v5+1RLXM=
Subject key identifier:   40:02:BF:FD:A9:8F:65:33:7C:0E:B6:E9:37:AF:FE:12:C1:64:ED:6B
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2761
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/7F0F0E7AC92311EBB709B444C4F9AE02.roa
Signing time:             Tue 30 Jul 2024 16:04:11 +0000
ROA not before:           Tue 30 Jul 2024 16:04:11 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     142420
IP address blocks:        2402:9e80:72::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10081 (0x2761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jul 30 16:04:11 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a90efb-daed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0e:cc:4a:4b:25:2d:bc:d1:72:3b:55:a3:12:
                    47:5f:3f:5d:b2:2e:4c:44:4f:32:9a:48:69:42:13:
                    d5:22:9d:2a:2d:5f:b1:c8:58:5c:8a:84:85:68:ff:
                    90:4c:0f:a0:f6:26:4c:61:d2:17:91:aa:00:02:04:
                    d2:ce:2f:82:75:2f:2b:cc:fe:bc:9c:72:92:62:0c:
                    9a:a7:27:f7:ab:d6:86:6e:bb:35:fa:df:ca:0d:79:
                    66:ef:50:c1:6d:27:55:55:05:57:cf:48:a2:47:2c:
                    8f:f0:0d:33:58:b2:98:29:2e:c1:31:65:c1:d4:18:
                    80:51:67:5d:bc:25:f4:0f:cd:9d:1d:94:88:17:97:
                    15:87:79:4b:7b:d9:54:1a:37:61:da:c1:af:6c:83:
                    fc:71:21:2a:ec:ec:ab:01:df:16:18:f8:92:a1:f6:
                    3f:ff:01:b1:b9:3a:b3:54:76:d8:03:62:48:56:76:
                    8a:9d:aa:d8:c8:88:4f:13:bc:a0:f5:fb:9b:a3:ff:
                    41:a6:49:be:0d:18:1f:f6:6d:5b:0c:ec:76:4f:bb:
                    a9:c3:9e:eb:a5:09:b5:a9:ae:8c:ae:78:db:41:9d:
                    c8:97:6e:a2:43:10:ff:bb:10:61:9f:6d:29:ae:52:
                    a6:fa:45:9a:ca:55:76:a3:e5:8c:83:55:35:6d:72:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:02:BF:FD:A9:8F:65:33:7C:0E:B6:E9:37:AF:FE:12:C1:64:ED:6B
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/7F0F0E7AC92311EBB709B444C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:72::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:b7:bd:92:65:46:12:68:6a:a6:90:eb:4f:93:db:e9:27:74:
         eb:e1:3d:db:f4:00:d0:94:2a:a7:72:7b:6a:67:57:0a:0d:3b:
         18:dd:d6:9a:60:6f:23:49:89:d3:85:f9:45:90:66:7f:f4:49:
         f0:99:14:85:a5:ee:5c:b0:56:87:70:cf:a1:84:5f:37:39:0a:
         0b:36:57:75:fe:5f:d7:4b:fe:d8:3a:3c:b2:94:af:d4:e8:ec:
         0a:17:3f:9b:c7:0a:05:3d:9f:3a:43:a1:bf:f6:75:ed:7e:a4:
         8b:df:47:13:76:67:14:31:87:fe:8c:08:17:44:c8:77:79:91:
         01:6d:f0:e3:cb:26:5e:b6:bd:8d:40:53:3c:68:f8:3b:59:0e:
         8e:b0:b5:4a:db:40:80:c8:b2:f7:74:02:1b:90:fb:a5:6e:8e:
         79:48:34:67:83:2a:b6:74:e6:ea:34:df:a9:cd:df:16:97:dd:
         40:1e:01:23:b6:59:ad:a8:1e:ff:e1:c2:83:ca:6e:49:be:3b:
         16:8e:3e:43:a4:e0:d8:83:dc:55:98:23:b5:11:76:48:14:e7:
         68:f1:d3:df:9d:c5:c5:e7:f8:50:2c:36:b6:49:b8:59:43:4d:
         f8:c3:c6:42:ee:ec:71:e5:41:8b:dc:36:1d:95:7a:60:b1:fe:
         73:9e:13:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:49:13 2024 by rpki-client on console-ams.rpki-client.org